So by regularly updating credentials, quickly updating and patching your software, and repaving your servers regularly, you are taking steps to make all these less likely.

Repaving servers typically means recreating your VMs from a known “good” image, as opposed to the much more common approach of applying incremental changes (meaning the “the slate almost never gets wiped clean”).